Hi all, I would like to discuss whether to disconnect the broker and the client after authorization failure.
Right now the Pulsar doesn't disconnect the client on the broker side after authorization failure, then this client can still do other operations. For an unauthorized user, we should disconnect this connection to avoid hogging resources. Please let me know what you think. PR: https://github.com/apache/pulsar/pull/18578 Thanks, Zixuan